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CLAIMS 

1. A mqthod of ciphering data transmission in a radio system, 
t>mprising: 

(602) generating a ciphering key; 

(604A) producing a ciphering mask in a ciphering algorithm using 
the ciphering key astan input parameter; 

(606) producing ciphered data by applying the ciphering mask to 

plain data; 

(604B) udling a logical channel specific parameter or a transport 
channel specific parameter as an additional input parameter to the ciphering 
algorithm. 

2. The methbd as claimed in claim 1, further comprising: 
using the diqpction of transmission as an additional input parameter 

to the ciphering algoritt 

as claimed in claim 1, wherein the logical channel 
of the following: a Radio Access Bearer Identifier, a 
a Signaling Link Identifier. 

as claimed in claim 1 , wherein the transport channel 
dicated Channel Identifier, 
as claimed in claim 1, further comprising: 
using a radiol frame specific parameter as an additional input 
parameter to the ciphering algorithm. 

6. The method! as claimed in claim 5, wherein the radio frame 
specific parameter is a User Equipment Frame Number. 

7. The method I as claimed in claim 1, wherein the plain data 
includes Radio Link Control Layer Protocol Data Units from at least two 
parallel logical channels, apd for each logical channel an individual ciphering 
mask is produced. 

8. The method aa claimed in claim 7, wherein a Radio Link Control 
Layer Protocol Data Unit oflat least one logical channel is already ciphered, 
and the step of producing ciphered data is not repeated for said already 
ciphered Radio Link Control liayer Protocol Data Unit. 

9. The method asl claimed in claim 1, wherein the plain data 
includes one Radio Link Control Layer Protocol Data Unit from one logical 
channel, and for said logical cnannel an individual ciphering mask is produced. 



3. The methfl 
specific parameter is or 
Logical Channel Identify 

4. The method 
specific parameter is a 

5. The methoc 
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10. The method as claimed in claim 1, wherein the plain data 
includes at least two successive Radio Link Control Layer Protocol Data Units 
of one logical channel,\and for each Radio Link Control Layer Protocol Data 
Unit a different part of pie ciphering mask is used in producing the ciphered 

5 data. 

11. The method as claimed in claim 1, wherein the plain data 
includes one Transport! Block Set including Medium Access Control Layer 
Protocol Data Units of at least two different logical channels, and for each 
Transport Block Set onq ciphering mask is used in producing the ciphered 

10 data. 

12. The methob as claimed in claim 1, wherein the plain data 
includes one Transport Brack Set including a Medium Access Control Layer 
Protocol Data Unit of onellogical channel, and for each Transport Block Set 
one ciphering mask is used in producing the ciphered data. 

15 13. The method! as claimed in claim 1, wherein the ciphering is 

performed in the Medium Aacess Control Layer of a protocol stack. 

14. The method as claimed in claim 1, wherein a new ciphering 
mask is produced for each jfadio frame of the physical layer of the protocol 
stack. 

20 15. The method afe claimed in claim 1, wherein a new ciphering 

mask is produced for each interleaving period of the physical layer of the 
protocol stack. 

16. A user equipment (UE), comprising: 
generating means (4D8) for generating a ciphering key (410); 

25 a ciphering algorithm (400) connected with the generating means 

(408) for producing a ciphering mask (41 2A, 41 2B, 41 2C) using the ciphering 
key (410) as an input parameter! 

ciphering means (416A, 416B, 416C) connected with the ciphering 
algorithm (400) for producing ciphered data (41 8A, 41 8B, 41 8C) by applying 
30 the ciphering mask (412A, 412B, 412C) to plain data (414A, 414B, 414C); 

the ciphering algorithm (400) uses a logical channel specific 
parameter (402A) or a transport\ channel specific parameter (402B) as an 
additional input parameter. 

17. The user equipment as claimed in claim 16, wherein the 
35 ciphering algorithm (400) uses the \direction of transmission as an additional 

input parameter. 



18. The user equ 
channel specific parameter 
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ipment as claimed in claim 16, wherein the logical 
(402A) is one of the following: a Radio Access 
Bearer Identifier, a Logical Cthannel Identifier, a Signaling Link Identifier. 

19. The user equipment as claimed in claim 16, wherein the 
5 transport channel specific parameter (402B) is a Dedicated Channel Identifier. 

20. The user equipment as claimed in claim 16, wherein the 
ciphering algorithm (400) usjps a radio frame specific parameter (404) as an 
additional input parameter. 

21. The user equipment as claimed in claim 20, wherein the radio 
10 frame specific parameter (404v) is a User Equipment Frame Number. 

22. The user equipment as claimed in claim 16, wherein the 
ciphering means (416A, 416BI 416C) accept plain data (414A, 414B, 414C) 
including Radio Link Control \Layer Protocol Data Units from at least two 
parallel logical channels, and trie ciphering algorithm (400) produces for each 

15 logical channel an individual oiphering mask (412A, 412B, 412C), and the 
ciphering means (41 6A, 41 6B, 41 6C) use for each logical channel the 
ciphering mask (412A, 412B, 412C) of said channel. 

23. The user equipment as claimed in claim 22, wherein a Radio 
Link Control Layer Protocol Data\ Unit (414C) of at least one logical channel is 

20 already ciphered, and the ciphering means (41 6C) do not cipher said already 
ciphered Radio Link Control Layer Protocol Data Unit (414C). 

24. The user equipment as claimed in claim 16, wherein the 
ciphering means (416A) accept! plain data (414A) including a Radio Link 
Control Layer Protocol Data Unit from one logical channel, and the ciphering 

25 algorithm (400) produces for said logical channel an individual ciphering mask 
(41 2A), and the ciphering means! (41 6A) use for said logical channel the 
ciphering mask (412A) of said channel. 

25. The user equipment as claimed in claim 16, wherein the 
ciphering means (426) accept plam data including at least two successive 

30 Radio Link Control Layer Protocol Data Units of one logical channel, and the 
ciphering algorithm (400) produces for said logical channel an individual 
ciphering mask (41 2A), and the ciphering means (426) use for each Radio 
Link Control Layer Protocol Data Unit different part of the ciphering mask 
(412A). I 

35 26. The user equipment las claimed in claim 16, wherein the 

ciphering means (434) accept plain data including one Transport Block Set 
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including Medium Access Control Layer Protocol Data Units of at least two 
different logical channels, and ihe ciphering algorithm (400) produces for each 
Transport Block Set an individual ciphering mask (412), and the ciphering 
means (434) use for each Transport Block Set one ciphering mask (412). 
5 27. The user equipment as claimed in claim 16, wherein the 

ciphering means (434) accept plain data including one Transport Block Set 
including a Medium Access Control Layer Protocol Data Unit of one logical 
channel, and the ciphering algorithm (400) produces for each Transport Block 
Set an individual ciphering mask (412), and the ciphering means (434) use for 
10 each Transport Block Set one ciphering mask (412). 

28. The user equipment as claimed in claim 16, wherein the 
generating means (408), the ciphering algorithm (400), and the ciphering 
means (416A, 416B, 416C) resid^ in the Medium Access Control Layer of a 
protocol stack. 

15 29. The user equipment as claimed in claim 16, wherein the 

ciphering algorithm (400) produces a new ciphering mask (41 2A, 41 2B, 41 2C) 
for each radio frame of the physical layer of the protocol stack. 

30. The user equipment las claimed in claim 16, wherein the 
ciphering algorithm (400) produces ajnew ciphering mask (41 2A, 412B, 41 2C) 

20 for each interleaving period of the physical layer of the protocol stack. 

31. A radio network subsystem (RNS), comprising: 
generating means (408) for generating a ciphering key (410); 

a ciphering algorithm (400)1 connected with the generating means 
(408) for producing a ciphering mask (Ul2A, 41 2B, 41 2C) using the ciphering 
25 key (410) as an input parameter; 

ciphering means (41 6A, 416fe, 41 6C) connected with the ciphering 
algorithm (400) for producing ciphered Idata (41 8A, 41 8B, 41 8C) by applying 
the ciphering mask (412A, 412B, 412C) to plain data (414A, 414B, 414C); 

the ciphering algorithm (400) uses a logical channel specific 
30 parameter (402A) or a transport channel specific parameter (402B) as an 
additional input parameter. 

32. The radio network subsystem as claimed in claim 31, wherein 
the ciphering algorithm (400) uses th$ direction of transmission as an 
additional input parameter. 

35 33. The radio network subsystem as claimed in claim 31, wherein 

the logical channel specific parameter (402A) is one of the following: a Radio 
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Access Bearer Identifier, a Logical Channel Identifier, a Signaling Link 
Identifier. 

34. The radio rtetwork subsystem as claimed in claim 31, wherein 
the transport channel specific parameter (402B) is a Dedicated Channel 

5 Identifier. 

35. The radio nfetwork subsystem as claimed in claim 31, wherein 
the ciphering algorithm (4Q0) uses a radio frame specific parameter (404) as 
an additional input parameter. 

36. The radio network subsystem as claimed in claim 35, wherein 
10 the radio frame specific parajmeter (404) is a User Equipment Frame Number. 

37. The radio network subsystem as claimed in claim 31, wherein 
the ciphering means (416AA 416B, 416C) accept plain data (414A, 414B, 
414C) including Radio Link Control Layer Protocol Data Units from at least two 
parallel logical channels, and the ciphering algorithm (400) produces for each 

15 logical channel an individual Iciphering mask (412A, 412B, 412C), and the 
ciphering means (41 6A, 41 6B, 41 6C) use for each logical channel the 
ciphering mask (412A, 412B, 412C) of said channel. 

38. The radio network subsystem as claimed in claim 37, wherein a 
Radio Link Control Layer Protocol Data Unit (41 4C) of at least one logical 

20 channel is already ciphered, antl the ciphering means (41 6C) do not cipher 
said already ciphered Radio LinklControl Layer Protocol Data Unit (414C). 

39. The radio networktsubsystem as claimed in claim 31, wherein 
the ciphering means (41 6A) accept plain data (414A) including a Radio Link 
Control Layer Protocol Data Unit from one logical channel, and the ciphering 

25 algorithm (400) produces for said Ibgical channel an individual ciphering mask 
(41 2A), and the ciphering mearts (41 6A) use for said logical channel 
theciphering mask (412A) of said channel. 

40. The radio network subsystem as claimed in claim 31, wherein 
the ciphering means (426) accept prain data including at least two successive 

30 Radio Link Control Layer Protocol Cteta Units of one logical channel, and the 
ciphering algorithm (400) prod uces\ for said logical channel an individual 
ciphering mask (41 2A), and the ciphering means (426) use for each Radio 
Link Control Layer Protocol Data Unif a different part of the ciphering mask 
(412A). 

35 41. The radio network subsystem as claimed in claim 31, wherein 

the ciphering means (434) accept plain pata including one Transport Block Set 
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including Medium Access Control Layer Protocol Data Units of at least two 
different logical channels, and the ciphering algorithm (400) produces for each 
Transport Block Set an individual ciphering mask (412), and the ciphering 
means (434) use for each Transport Block Set one ciphering mask (412). 

42. The radio network subsystem as claimed in claim 31, wherein 
the ciphering means (434) accept plain data including one Transport Block Set 
including a Medium Access Control Layer Protocol Data Unit of one logical 
channel, and the ciphering algorithm (400) produces for each Transport Block 
Set an individual ciphering mask (412), and the ciphering means (434) use for 
each Transport Block Set one ciphering mask (412). 

43. The radio network subsystem as claimed in claim 31, wherein 
the generating means (408), the ciphering algorithm (400), and the ciphering 
means (416A, 416B, 41 6C) reside in the Medium Access Control Layer of a 
protocol stack. \ 

44. The radio network subsystem as claimed in claim 31, wherein 
the ciphering algorithm (400) produces a new ciphering mask (412A, 412B, 
41 2C) for each radio frame of the physical layer of the protocol stack. 

45. The radio network subsystem as claimed in claim 31, wherein 
the ciphering algorithm (400) produces a new ciphering mask (41 2A, 41 2B, 
41 2C) for each interleaving period on the physical layer of the protocol stack. 



